Categories: OS X

New Adware Trojan Threat for Mac OS X

A report from Dr. Web, a Russian anti-virus company,warns Mac OS X users about a new threat called Trojan.Yontoo.1.

This Trojan gets downloaded mainly from a prompt that asks users to install a browser plug-in, this prompt imitates a common dialogue for when additional configuration is necessary to watch movies online!

Instead of downloading a media plug-in, the Trojan is downloaded. Trojan.Yontoo.1 then prompts to install an extension called Twit Tube.

This is installed as an extension for Safari, Firefox and Chrome.

This then tracks the users browsing habits but also delivers adverts on all the websites that you visit. Even Apples own site!

To avoid this type of Trojan it is wise to only install plugins and extensions that you are sure of, if you are not sure just Google and if it is a known problem stay well clear. However if your device is infected follow these easy steps to banish it-

In Firefox choose ‘Add-ons’ from the Tools menu, look for an entry called ‘Yontoo’ and click Remove.

In Chrome & Safari go to Preferences and choose ‘Extensions’ and click Uninstall (In Safari you can also see any add-ons in the Help menu-Installed Plug-ins)

Once you see any sign of Yontoo on your device though I would recommend removing the plug-in more thoroughly!

Go to the Macintosh HD-Library-Internet Plug-Ins folder and remove all traces.

Once all traces are removed quit and relaunch your chosen browser.

Michael

UPDATE

Apple has updated its “Xprotect” anti-malware system to recognize Yontoo and warn users who attempt to install it on their machines.

Apple has decided the Yontoo Adware has fallen too far on the side of undesirable behavior, as they have released an update to the XProtect.plist definitions file to provide Mac OS X with basic detection for the Yontoo adware as OSX.AdPlugin.i. In testing, it appears this detection is very specific and potentially location-dependent. This extra specificity is likely there so as to catch only the surreptitious installations of this file.

Michael

a professional musician but a technophile at heart. When not rehearsing can be found gazing adoringly at his iPhone/MacBookAir or looking for a little white ball in tall grass....

Recent Posts

1.2 billion payments made on Irish cards in first half of 2026

There were over 1.2 billion domestic payments made on Irish cards, valued at almost €50…

2 days ago

PC Peripherals rebrands as Eduvolve, 20 new jobs planned

PC Peripherals receives €2.5m investment as Business Rebrands to Eduvolve Education technology group announces major…

2 days ago

New Starter Home Scheme from Longford County Council offers discounts of up to €95,000

Longford County Council’s Starter Home Purchase Scheme offers 25 high-quality A-rated family homes at Cúirt…

2 days ago

Disseqt wins the KPMG Global Tech Innovator Ireland competition 2026

KPMG has announced that Disseqt, headquartered at NovaUCD in Dublin, has been named the winner…

2 days ago

More about Irish Tech News


Irish Tech News are Ireland’s No. 1 Online Tech Publication and often Ireland’s No.1 Tech Podcast too.


You can find hundreds of fantastic previous episodes and subscribe using whatever platform you like via our Anchor.fm page here: https://anchor.fm/irish-tech-news


If you’d like to be featured in an upcoming Podcast email us at Simon@IrishTechNews.ie now to discuss.


Irish Tech News have a range of services available to help promote your business. Why not drop us a line at Info@IrishTechNews.ie now to find out more about how we can help you reach our audience.


You can also find and follow us on Twitter, LinkedIn, Facebook, Instagram, TikTok and Snapchat.